Data Discovery: Cloud DLP API can effectively discover PII within your reports, identifying sensitive information that needs to be protected.
Data Transformation: Once PII is detected, Cloud DLP can transform it into a format that removes personally identifiable elements, such as anonymization or generalization. This ensures that the data remains usable for analytics purposes while protecting privacy.
Data Integrity: By transforming PII rather than deleting it, you preserve the overall structure and context of the data, maintaining its integrity for analysis.

https://cloud.google.com/containers/security
Containers are meant to be immutable, so you deploy a new image in order to make changes.
You can simplify patch management by rebuilding your images regularly, so the patch is picked up the next time a container is deployed. Get the full picture of your environment with regular image security reviews.

- Access Approval : This lets you control access to your organization's data by Google personnel.
- Key Access Justifications : This provides a justification for every request to access keys stored in an external key manager.

https://cloud.google.com/solutions/dr-scenarios-for-data#production_environment_is_on- premises

https://cloud.google.com/blog/products/g-suite/protecting-you-against-phishing